VDB
ALINUX2-SA-2019%3A0036
ALINUX2-SA-2019%3A0036
PUBLISHED
CVSS 5.5 MEDIUM
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2019-11833: fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.
Risk Scores
CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alibaba Cloud | kernel |
Timeline
- Jun 3, 2019 CVE Published
- Jun 3, 2019 CVE Updated